Jump to content

nukecad

Moderators
  • Posts

    7,939
  • Joined

  • Last visited

Posts posted by nukecad

  1. Different cleaners target different things.
    CCleaner itself can be customised to target different things.

    Without knowing specifically what the 3.08GB of junk files your Avast found that your CCleaner didn't were then it's impossible to say more.
    Can you get Avast to show what they are/were?

    Are you using Health Check or Custom Clean?
    Health Check uses it's own rules, but It's quite likely that if you use Custom Clean that 3.08GB will be in one of the catagories that you can clean there - if selected for custom cleaning.

    Registry Items -
    CCleaner includes a Registry Cleaner, you run it seperately because it is only recommended to use if you actually have a problem with the registry.
    Cleaning the registry when you don't have a problem can cause problems, and even 'break' your machine.

    Apps slowing down your PC -
    CCleaner>Options>Startup, again it's seperate because you may not want to change what starts with your computer.
    CCleaner>Performance Optimiser, lets you choose to put apps in the background that are not currently being used to 'sleep'. (It's patented by CCleaner).

    PS. Are you aware that Avast and CCleaner are part of the same company now, along with Norton, LifeLock, Avira, AVG, and ReputationDefender? It's called 'GEN Digital'.
    https://www.gendigital.com/

  2. What CCleaner version are you using?
    (The 'Manage Subscription' button recently went missing for some reason).

    There does currently appear to be a problem with the servers at CCleaner/Piriform, maybe try again tomorrow to see if it has been fixed?

    Support do seem to be slow to reply to emails at the moment, as users ourselves we don't know why that is.
    PS. It's usually best not to bombard any support department with more than one request, often making a new request also puts any earlier ones you made to the back of the queue again. It's the way that the standard request queueing software works.

     

  3. 14 hours ago, Willy2 said:

    Well. that article doesn't reflect my experiences with my SSD. I have regularly recovered files from my internal SSD. Perhaps my version of Windows doesn't support TRIM yet ?

    It's more likely that you have turned TRIM off yourself (and forgotten?) after reading something like this which points up that you can't recover files after a TRIM and tells you how to turn TRIM off/on:
    https://www.makeuseof.com/why-how-disable-trim-command/

    TRIM should be enabled by default in Windows10/11, but the user can choose to turn it off and sacrifice  SSD performance to gain the chance of recovery.

    (I also believe that some early SSDs didn't support TRIM anyway, so if yours is an older one it might not).

  4. I think that it just goes to point up what I was saying about VT and False Positives.

    Nothing changed in the ccsetup614.exe file itself, the only thing that changed was how one particular AV (out of 68) was classifying it at different times.

    AVs do update their definitions all the time, often multiple times a day, and it is not unusual for some of them to be too cautious. Like an over-protective nanny.
    Plus the particular AV that was the issues here is a specialist one for network endpoints, you can expect it to sometimes give different, over cautious,  results to ones meant for home use.

    In the end it's your choice, but if you get a similar situation again then you can just keep trying VT until it does give a green.
    (Or do as most of us do - go with the majority on VT and ignore a couple of FPs)

  5. I would not worry at all.

    Virus Total is like any other diagnostic tool in that you have to have some knowledge of what the results it gives actually mean.
    VT can only give you information, you have to check that information and decide for yourself if it is relevent to you.

    If you use VT regularly then you will know that False Positives often happen, and that 1 detection out of 68 is almost certainly a False Positive.
    (In fact 4 or 5 out of that many results wouldn't bother me unduly).
    Look at it the other way round - 67 out of 68 AVs have said that CCsetup614.exe is clean and is safe to use.

    Minimal detections like that on VT usually come from little known and/or specialist AVs - and that is what is happening here.

    In this case the one particular AV in your screenshot that flagged CCsetup614.exe is Deep Instinct.
    Deep Instinct is intended for "endpoint" security, ie. business and large organisation networks that need extra checks for if an employee/user tries to install something that is not meant for use on a networked system.
    https://www.deepinstinct.com/endpoint-security

    CCleaner is meant for home (or small business) use, it is not designed for use on networked systems.
    CCleaner Cloud is the edition for use with network endpoints, if a business chooses to use it.

    So it is not surprising at all that an AV meant for network endpoints would flag up a home use cleaner app which can access system files to clear them, as well as access other user accounts in some circumstances - things which you may want to do at home, but should not be doing on a business network.

    (We had a post here recently where a company's employee had tried to do just that, and their endpoint security rejected it and threw up multiple warning flags to their IT department, as it should on a business network).

    So in the end it is your choice how to interpret the VT result and what to do with the information it gives you.
    Mostly that comes from experience of using it and double checking what it says for yourself.

     

     

     

     

  6. Yes it needs those folders to run properly. At the very least it needs the DATA folder and its sub-folders, and the LOG folder.
    And I believe that they need to be in the same place as the .exe so that it knows where to find them.

    Presumably you had deleted the zip after extracting CCleaner64.exe but before running it? (See below).
     

    2 hours ago, tkrojam said:

    I think the principle is you have to run on an external drive first for portable version in order to create necessary subfolders and files first.

    Not quite, there is another way:
    If I copy/paste only CCleaner64.exe out of the zip to the desktop, but leave the zip where it is, (it was in Downloads) then the first time I double-click CCleaner64.exe on the desktop CCleaner itself extracts the needed folders and sub-folders from the zip to the desktop and then opens. (The zip can then be deleted).

    image.png

  7. On 09/08/2023 at 00:05, Adam_B said:

    ... can you point me in the direction of more information or share more on why "anything that has been shift/deleted from an SSD has a next to zero chance of being recovered by any recovery software?" I like to know how things work. I thought that the files would still be marked as deleted somewhere on the drive similar to a traditional mag disk.

    It's actually more accurate to say that deleted files from an internal SSD have little to no chance of being recovered.
    If it's an extenal SSD connected by USB then there is more chance of recovery.

    The difference between recovery from HDDs and SSDs basicallly comes down to the TRIM command issued by the computer to SSDs.

    Unlike a HDD where the file just gets marked as deleted, but the data remains on the drive until overwritten by new data, with a SSD you have to erase the data to empty the 'blocks' of memory so that new data can be written there - and it is the TRIM command that triggers the SSD to perform that 'garbage collection'.
    A TRIM command usually gets issued by the computer when you delete something - so the data itself gets deleted almost immediately.

    However because TRIM is an ATA command it cannot be issued through a USB connection.
    The USB connected SSD will still 'garbage collect' to free up deleted data occasionally, but with no TRIM available from the computer then the data isn't erased immediately, and so may still be recoverable for a while.

    This short article is a bit old now but explains it well without getting too technical: https://www.datanumen.com/blogs/ssd-vs-hdd-different-chances-recovering-deleted-files/

  8. This is CCleaner Portable open on my laptop,.
    As you can see it is sat there using 0% CPU. It only uses the CPU when it is actively scanning for junk or doing something else.

    image.png

    I also note that mine when loaded but not scanning it is taking 39.9 MB of RAM, whereas yours is only showing 5.7 MB of RAM in use.

    All of which suggests to me that something is preventing it from loading properly on your machine; for some reason it is 'stuck' during loading and that is why you don't see a user interface.

    Are you trying to run it as an Admin user or a Standard user?

    What antivirus are you using, and if it isn't Windows Defender then what version is your AV?
    Have you been adding extra blocks to your firewalls or hosts file?

    You say you run it from the desktop,
    Have you simply extracted the files from the zip onto the desktop? or have you extracted it to somewhere else and then made a shortcut on the desktop?

    I assume that you are using the portable for your own reasons, but have you considered installing CCleaner?

     

     

  9. On 04/08/2023 at 02:57, tkrojam said:

    I've just run the latest portable version of ccleaner on Windows 10 with latest Windows updates.

    I've tried the 32 bit and 64 bit versions and even many older versions.

    Are you running it from a USB stick?

    Where did you download CCleaner portable from? (And where did you get those old versions?)

    Your screenshot shows it using 24.1% of the CPU and power usage is showing as 'Very High' - which indicates that it is actively doing something , it is not just sat idle in the background.

  10. If you are using Custom Clean then untick 'Session' for the browser.
    Clearing the browser session logs you out of websites.

    image.png

    Also note that some websites still use a cookie to store your login status, if you are using one of those sites then you will need to either:
    Put that cookie in 'Cookies to keep' in the CCleaner Options.
    or do a scan in Health Check, click on 'Privacy' and then 'Manage allowed websites' to add the website to the keeplist.

  11. Yes, even in Windows 11 that doesn't have IE, other things (including Edge) use the old IE storage locations.

    Over the years they have become a convinent place for any application to put temporary files - so even with IE gone they still benefit from a clean out.

  12. It's the cyber security being cautions when faced with something unknown to it.
    In this case it didn't know CCleaner or what it checks.

    So it saw CCleaner looking to check what input devices a user had connected (so that it knows what logs may need to be cleaned) - that checking is also the kind of action that a keylogger might do.
    As the security didn't know just what CCleaner is then to be cautious it would warn of a possible keylogger.

    It's the nature of cyber security applications to classify activities broadly when outputing warnings to the user or logs.
    They only have a limited number of option strings that they can output so they pick the nearest one to what they are seeing, to advise the user to look at that possibility.

    It's a bit like the CCleaner error message saying ' It seems like you are offline' when in fact you are online and it's a server connection that is the problem, CCleaner has just picked it's closest message to display.

  13. 2 hours ago, trevorwood said:

    This is running from a normal non-admin account

    It was noticed a while back that when installing CCleaner for a non-admin user to use then you had to do the 'Run CCleaner' from within the installer as the last step of the install.

    If you didn't do that then the user permissions would not be set correctly and CCleaner would not work properly (if at all) for the non-admin user.

    You can try reinstalling CCleaner and making sure you 'Run CCleaner' from within the install.

    You don't have to uninstall the existing CCleaner.
    Download an installer from here and simply double click it to reinstall CCleaner: https://www.piriform.com/ccleaner/builds

    Reinstalling over the existing CCleaner will pick up any cleaning settings and licence key from the existing CCleaner (that's why you don't uninstall it first).

  14. Assuming that your employee has tried to install the official CCleaner (and not a dodgy repack from somewhere on the web) then I suspect that what you are seeing is normal behaviour when installing CCleaner an a home machine.
    Support should be able to confirm that for you.

    However it is probably not behaviour that would be expected, (or allowed), in a business network situation.
    (There are business versions of CCleaner designed specifically for IT departments to deploy over their networks).

    Presumably your employers are prohibited from installing their own apps on your business machines.

    CCleaner home version does require elevated permissions. (Hence the 'skipUAC' option, which although created during install is normally switched off by default).
    It does scan to see what CPU is running and it does scan for the Windows version in use, so that it knows what/where can safely be cleaned.
    It does scan for other user accounts, an Admin user using CCleaner Pro can clear junk files from other user accounts.
    It does scan for installed applications and drivers, it does that in order to know what the user may want to update.
    It does scan for startup apps, and other scheduled tasks, so that it can put uneeded ones to 'sleep' if the user chooses.
    It does contact various servers to get up-to-date information, such as new application versions or new driver versions.
    etc, etc.

    In short many of the actions that CCleaner does on install, and during use, are not exceptional for an application of the type.
    Most home use AV/AM applications recognise CCleaner, they know what it is, what actions it takes, and that it's actions are not malware.

    But if your business cyber security is not expecting CCleaner to be installed on a network endpoint, which it obviously wasn't, then those actions can look typical of what a malware might also do.
    In those circumstances then most of those actions are are going to trigger your protection application's alarms if a person tries to install a CCleaner home version on your business networked environment.

    Again, there is always the slight possibility that your employee has acquired an installerr for somewhere on the web that could have been tampered with and repacked.

    EDIT- I see that your employee says that it was a download from the official site.

    In which case malware can probably be ruled out and I'd suggest that it's almost certainly simply that your buisness cyber security is not recognising CCleaner home.
    A case of 'user error', - trying to install something that they shouldn't have on a works computer.

×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.